Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
File:                     mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json)
Hash identifier:          U3sWdPomIDczPFW36IMu4q871aCbmkPy1x3MUkD6bJY=
Subject key identifier:   38:35:98:BE:2D:11:58:18:CA:73:73:38:48:ED:04:3F:53:C4:60:1C
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Certificate issuer:       /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial:       01FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
Manifest number:          01EE
Signing time:             Wed 17 Sep 2025 03:09:47 +0000
Manifest this update:     Wed 17 Sep 2025 03:09:46 +0000
Manifest next update:     Wed 24 Sep 2025 03:09:46 +0000
Files and hashes:         1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: WLRICxyOPxHtXusqMSE4hqOTV2JbyMloKFDbTvJoAVk=)
                          2: B24758AE772311EFA5510A63C4F9AE02.roa (hash: 7G0BMVUvyd16Cn1kPop9OQuW3GDQmIvZTooAvUo69iU=)
                          3: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: nyG124tiVkImPGU3rqTUWRaCP3DJ/CIWqzndBgQMaZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
                          rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 03:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
        Validity
            Not Before: Sep 17 03:09:46 2025 GMT
            Not After : Sep 24 03:09:46 2025 GMT
        Subject: CN=68ca267a-fe3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bb:f8:45:1e:c6:45:3f:e1:fe:bd:a5:56:d4:
                    9b:43:c5:a3:32:dc:a2:9c:6b:30:a4:6b:c5:fd:33:
                    a2:af:cf:ca:d2:32:e3:19:12:ed:a1:03:08:45:1a:
                    24:04:68:9b:af:2c:77:14:c0:f0:e2:85:27:35:c1:
                    ec:e8:47:5a:54:5a:e7:32:4c:5a:5b:10:39:92:ce:
                    98:9e:31:38:f3:5f:5d:a1:e3:2d:fa:c1:11:db:a3:
                    b0:a0:17:f8:e9:bd:42:8b:33:3c:1a:79:3e:6a:ee:
                    e9:53:8d:04:45:f1:61:92:43:49:22:4c:4b:68:21:
                    61:f2:e4:20:bd:a2:6d:bd:da:06:5c:2e:93:46:4f:
                    7b:63:88:39:e5:90:66:6e:f4:f8:a4:51:de:70:4a:
                    fe:36:aa:69:5f:07:05:d4:28:63:7a:3d:34:80:ca:
                    fb:13:ba:0f:39:0f:dd:98:6c:ff:c3:c7:b2:35:ce:
                    27:1a:e3:f5:6a:a2:96:da:c6:10:ab:f8:47:bb:91:
                    ef:bd:71:41:18:fb:c6:c7:ed:ef:87:57:a0:27:d2:
                    9a:b3:0d:74:fb:e1:30:c1:b9:90:5c:aa:5c:f9:66:
                    7a:e0:ab:8f:78:b2:43:d4:76:cc:0f:d8:04:90:51:
                    e2:c3:f6:e4:4a:39:c9:e1:77:fc:91:bb:25:f7:9f:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:35:98:BE:2D:11:58:18:CA:73:73:38:48:ED:04:3F:53:C4:60:1C
            X509v3 Authority Key Identifier:
                keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:77:d9:b3:91:e0:5c:90:d6:90:f6:f9:3a:be:a3:ce:12:50:
         df:9d:87:bc:29:2b:2f:da:6f:6e:c0:44:44:3f:9f:a6:03:7c:
         0e:5b:a7:91:65:e0:a9:61:dd:e3:ab:36:c7:85:5b:48:7b:02:
         ce:fe:6c:aa:b0:0b:cd:65:83:e0:96:3f:ce:c7:8a:cc:e9:f9:
         92:bb:13:89:22:1d:b9:52:8e:79:f9:d5:76:59:e6:aa:af:0a:
         a2:d1:a0:19:a4:85:b2:a8:95:2a:59:ee:a2:20:26:02:61:09:
         12:ee:11:24:76:ea:7e:6c:c2:0d:da:63:19:89:96:18:e4:ce:
         a2:76:31:4d:df:2a:41:77:b5:2c:a2:e7:ed:e4:0f:94:9e:68:
         17:91:0c:75:8b:25:88:39:b2:ac:fa:47:eb:40:1a:10:1a:35:
         ed:c5:ad:9d:55:67:dd:18:77:65:85:e1:1e:b0:b5:99:69:ab:
         44:58:5e:35:ce:c2:cd:d4:36:ec:7f:2b:a7:47:ba:a5:2f:3f:
         80:8a:4e:73:d3:bf:a7:28:90:c2:57:46:76:44:79:11:b8:ce:
         68:69:99:76:8f:5e:7d:c3:1f:25:b7:77:9c:9b:66:a8:e3:e9:
         61:72:5b:c1:34:40:5d:ac:6e:a6:0b:af:b8:19:c2:67:42:f9:
         a8:5b:b6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:24:23 2025 by rpki-client